Privacy Policy

The short version

Your full footage never leaves your machine.Endroll indexes and renders video locally. What reaches our servers is text: prompts, transcripts, text digests of your footage, and the usage records needed to bill credits. We don’t sell data, and we don’t run advertising trackers.

1. Who is responsible

The data controller is RagingRam Oy, Business ID 2944344-6, Jermunkuja 13, 08700 Lohja, Finland. Contact: support@endroll.ai.

2. What we process

• Account data — your email address, name (if you give one), and paired-device records. Legal basis: performing our contract with you.
• Billing data — purchases are processed by Paddle.com as Merchant of Record. We receive transaction records (what was bought, when, for which account) but never your card details. Legal basis: contract and legal obligations.
• Credit usage — which AI operations you ran, when, and how many credits they consumed. This is how billing works. Legal basis: contract.
• AI request content — the text sent to power AI features: your prompts, scripts, transcripts and text digests of footage. Media files (video, audio, images) are not uploaded. Legal basis: contract.
• Beta applications — what you submit in the beta form (email, links, description of your work). Legal basis: consent, which you can withdraw at any time by emailing us.
• Support email — correspondence you send us. Legal basis: legitimate interest in answering you.

3. What we do not process

• Your video and audio files — they stay on your machine.
• Advertising or cross-site tracking data — there is none.
• Card numbers — payments are handled entirely by Paddle.

4. Service providers

We use a small set of processors to run the service:

• Paddle.com — payments and tax handling (Merchant of Record).
• Vercel — website hosting.
• Anthropic — AI processing of the text requests described above. Under our commercial agreement, this data is not used to train their models.
• Resend — transactional email (e.g. beta applications, account email).
• Cloudflare Turnstile — bot protection on forms.

Some providers process data in the United States. Where they do, the transfer is covered by the EU–US Data Privacy Framework and/or EU Standard Contractual Clauses.

5. Retention

Account and billing records are kept for as long as your account exists, and thereafter as long as accounting law requires. AI request content is retained only as long as needed to operate and debug the service. Beta applications are deleted when the beta program ends if you don’t become a customer.

6. Your rights

Under the GDPR you can ask us for access to, correction of, or deletion of your personal data, ask us to restrict or object to processing, and take your data with you. Email support@endroll.ai and we’ll handle it. You also have the right to lodge a complaint with a supervisory authority — in Finland, the Office of the Data Protection Ombudsman (tietosuoja.fi).

7. Cookies

This site uses only what is strictly necessary to function (including Cloudflare Turnstile’s bot check on forms). No analytics or advertising cookies are set.

8. Changes

If this policy changes materially — for example, when new features such as optional cloud storage integrations launch — we will update this page and notify account holders by email.